> Markdown version of [/jobs/ext/1453712-host-based-cyber-systems-analyst-iv](https://www.wearedevelopers.com/jobs/ext/1453712-host-based-cyber-systems-analyst-iv). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Host Based Cyber Systems Analyst IV - **Company:** Argo Cyber Systems - **Location:** Arlington, VA, United States - **Experience:** Expert - **Salary:** $130,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Bash Shell, Software as a Service, Cloud Computing, Cloud Database, Cloud Engineering, Computer Forensics, Digital Forensics, Infrastructure as a Service (IaaS), Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Platform as a Service (PAAS), Windows PowerShell, Azure Active Directory, Workflow Management Systems, Scripting, Google Cloud, Cloud Platform System, Office365, Amazon Virtual Private Cloud (VPC), Cloudformation, Kubernetes, Terraform, Azure Resource Manager, Docker - **Published:** July 26, 2026 - **Apply:** https://www.careerjet.com/jobad/us5e15d296b688bff1ac902f8320d6669d ## About the Role U.S. Citizenship - Active TS/SCI clearance - Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability - 8+ years of experience in cyber forensic investigations with leading tools and techniques. - Strong understanding of SaaS, PaaS, and IaaS in cloud environments, and hybrid identity security. - Expertise in acquiring forensically sound evidence, analyzing attacks, and reporting findings. - Knowledge of M365/Azure, hybrid identity, and threats targeting these solutions. - Knowledge of AWS, IAM, and best practices for cloud identity security. Desired Skills: - Strong API and scripting skills (PowerShell, Python, Bash, JavaScript) for automation and threat detection. - Knowledge of common and advanced cloud attacks and techniques, and how to detect and mitigate these threats. - Proficiency with cloud automation and orchestration tools (Terraform, Kubernetes, CloudFormation, Azure Resource Manager, Docker). This position requires a minimum of a USG Top Secret Security Clearance! ## Description Argo Cyber Systems provides remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based and cloud-based cybersecurity analysis capabilities. Team personnel provide front line response for digital forensics/incident response (DFIR) and proactively hunting for malicious cyber activity. We are seeking Cyber Network Defense Analysts (CNDA) with Cloud Forensics experience to support this critical customer mission. Responsibilities: - Conduct forensic acquisition and analysis from on-premises and cloud platforms (Entra ID/Azure AD, M365, AWS, GCP, SaaS) to identify compromise activity, persistence mechanisms, and data exfiltration. - Investigate and respond to incidents and attacks targeting cloud and hybrid identity. - Correlate cloud control-plane events and network telemetry (e.g., Azure Activity Logs, AWS CloudTrail, VPC Flow Logs) to reconstruct attacker timelines, validate IOCs, and identify post-compromise privilege escalation. - Develop and operationalize detection logic and automation using cloud-native tools (Microsoft Defender, Sentinel, AWS GuardDuty, GCP Chronicle) and scripting (PowerShell, Python, Bash), integrating threat intelligence feeds and indicators. - Produce technical reports, incident documentation, and containment recommendations integrating cloud, identity, and endpoint findings; support development of incident response playbooks and procedures for cloud and hybrid environments. - Support cloud development and automation projects to enhance threat emulation, investigative, and hunting capabilities. - Coordinate with internal teams, government staff, and external stakeholders to validate alerts and investigate preliminary findings. ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)